$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa File: 83e056c7-6751-3e7e-aa33-5370a6fbd431.roa (raw, json) Hash identifier: pbZQ6Bfn8B6VscRi+U817Osy7zSy3bijYGdVTlm+j4Q= Subject key identifier: E2:56:3C:27:D4:77:2B:92:8E:E1:2D:8D:DC:A1:77:E3:B6:69:FC:E3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285845347D4937CEE78B801525C284 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa Signing time: Thu 14 Mar 2024 13:00:30 +0000 ROA not before: Thu 14 Mar 2024 13:00:30 +0000 ROA not after: Wed 12 Jun 2024 13:00:30 +0000 asID: 7861 IP address blocks: 209.29.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:34:7d:49:37:ce:e7:8b:80:15:25:c2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 14 13:00:30 2024 GMT Not After : Jun 12 13:00:30 2024 GMT Subject: CN=87512f84-9fdf-4070-ae30-bc581a7e178e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:7f:47:98:7a:0e:78:11:04:14:b0:fa:b7: b4:7a:b6:74:41:ff:b5:49:5a:43:95:c6:e2:1c:7c: 94:4c:af:90:57:79:b6:f5:82:99:2c:61:b4:7f:d5: fd:66:94:2c:0a:e6:65:87:e5:b4:95:93:69:e6:37: 50:96:1f:35:30:b9:91:65:58:b6:e3:d9:5d:b3:3f: 70:7f:0a:67:6b:67:30:39:0b:28:4d:32:e4:6d:2e: 46:11:cd:74:a8:52:1d:17:af:fd:a8:d2:eb:b6:58: da:6f:d7:00:61:c8:2c:bf:67:9e:41:26:c2:31:2a: 0c:58:e3:eb:0b:ae:b9:55:fb:32:22:a7:90:17:fe: e4:73:1a:7b:9c:02:d5:ba:38:29:90:ec:b0:ed:32: f2:68:85:46:27:50:9b:0d:e7:00:62:84:b9:ae:88: 27:82:9a:f5:b0:bb:ac:b1:00:08:e7:eb:6b:bd:29: 92:04:de:48:24:e1:45:7f:9c:63:fb:47:e0:59:33: bd:b5:91:b8:46:61:c5:2a:7a:b8:87:22:21:3c:e3: 09:2c:43:8a:86:1e:35:0a:ed:9a:e0:88:93:84:95: d9:6e:52:dd:84:a9:24:97:45:76:8b:34:a6:3b:cf: a4:45:2d:1c:65:9d:75:3a:b6:59:08:e6:a8:9a:42: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:3C:27:D4:77:2B:92:8E:E1:2D:8D:DC:A1:77:E3:B6:69:FC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ee:8f:ba:ec:63:9a:ac:55:35:52:3d:69:3d:85:c8:86:6c: 39:cf:1c:2e:d9:ea:19:24:cc:32:90:5b:18:33:90:46:e7:af: 36:06:eb:8a:b8:93:7a:ee:a9:ab:30:87:82:89:e7:64:24:ac: 10:03:51:c4:04:fb:6a:78:bf:a9:b5:98:b3:43:9f:46:d8:05: bd:6a:93:f7:9d:6b:00:fd:dd:e1:a4:57:a0:e3:98:10:5a:14: 6e:81:49:86:c9:6d:48:ac:e2:4d:d3:92:bf:17:18:8a:f2:fb: fd:b1:8b:98:60:c7:47:9f:e8:e3:df:e8:5d:2d:32:45:0b:ab: ad:fc:99:ff:79:bb:a0:0e:44:28:f9:2a:7f:29:4d:f2:02:d9: ae:03:93:2c:7f:5a:e0:de:d7:ff:3c:a4:ab:71:bd:df:3f:5b: 84:70:d3:ea:52:bf:10:2e:31:5d:7e:d1:ff:f4:78:83:de:98: e8:25:0d:4b:69:49:ae:dd:a4:16:07:b6:1a:e4:23:00:a3:31: 68:b9:33:6f:9b:2e:0a:59:72:6c:ac:63:bb:bf:b3:2b:67:a0: f8:7b:5e:dc:33:2e:38:22:ae:79:38:02:44:89:cf:f4:ad:2b: 52:95:f6:39:3d:be:3b:3f:fc:20:08:0f:a2:5a:fe:0a:57:f3: 73:c7:79:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU0fUk3zueLgBUlwoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk ODc1MTJmODQtOWZkZi00MDcwLWFlMzAtYmM1ODFhN2UxNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhd/R5h6DngRBBSw+re0erZ0Qf+1SVpDlcbi HHyUTK+QV3m29YKZLGG0f9X9ZpQsCuZlh+W0lZNp5jdQlh81MLmRZVi249ldsz9w fwpna2cwOQsoTTLkbS5GEc10qFIdF6/9qNLrtljab9cAYcgsv2eeQSbCMSoMWOPr C665VfsyIqeQF/7kcxp7nALVujgpkOyw7TLyaIVGJ1CbDecAYoS5rogngpr1sLus sQAI5+trvSmSBN5IJOFFf5xj+0fgWTO9tZG4RmHFKnq4hyIhPOMJLEOKhh41Cu2a 4IiThJXZblLdhKkkl0V2izSmO8+kRS0cZZ11OrZZCOaomkJ8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJWPCfUdyuSjuEtjdyhd+O2afzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODNlMDU2YzctNjc1MS0z ZTdlLWFhMzMtNTM3MGE2ZmJkNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfuj7rsY5qsVTVSPWk9hciGbDnPHC7Z6hkkzDKQWxgzkEbnrzYG64q4 k3ruqaswh4KJ52QkrBADUcQE+2p4v6m1mLNDn0bYBb1qk/edawD93eGkV6DjmBBa FG6BSYbJbUis4k3Tkr8XGIry+/2xi5hgx0ef6OPf6F0tMkULq638mf95u6AORCj5 Kn8pTfIC2a4Dkyx/WuDe1/88pKtxvd8/W4Rw0+pSvxAuMV1+0f/0eIPemOglDUtp Sa7dpBYHthrkIwCjMWi5M2+bLgpZcmysY7u/sytnoPh7XtwzLjgirnk4AkSJz/St K1KV9jk9vjs//CAID6Ja/gpX83PHeas= -----END CERTIFICATE-----Generated at Sat May 18 16:11:00 2024 by rpki-client on console-ams.rpki-client.org